Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa
File: 477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa (raw, json)
Hash identifier: ecnNzI8dUSAqbsk9284+bauQY7xx/DE3FP+zMFteUwA=
Subject key identifier: 5B:B9:4F:FA:03:81:65:00:AC:6F:9E:BD:3A:36:88:21:48:15:70:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858490CB15AEE2232631FD8421FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 396567
IP address blocks: 199.7.71.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:5a:ee:22:32:63:1f:d8:42:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=4ff3b27d-8ee2-4d3e-968f-61593dc5ceb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:8e:d7:31:a2:9a:b9:b9:b5:bb:0c:d8:af:
62:20:49:bc:57:d7:3d:b1:1a:cf:ad:05:c5:97:96:
36:08:ff:12:17:80:99:c8:82:80:ce:ec:ca:1f:f8:
ae:44:40:e8:53:ec:f4:76:77:57:c5:f8:a9:10:17:
89:ec:ca:e8:76:c7:68:5a:16:16:8a:5d:6e:2f:bc:
33:d7:77:63:ad:98:3a:84:9c:37:2e:5f:28:6a:1b:
38:32:53:99:f2:07:d9:7f:27:e1:fb:7f:94:44:70:
47:d6:01:5d:82:9a:49:7f:3d:ca:61:af:2f:ca:a1:
da:3b:d2:fb:50:10:d6:4a:6e:8a:68:3e:00:70:43:
3d:9b:ff:db:89:13:5e:62:6e:38:59:ee:6b:6c:c2:
3a:be:83:db:44:93:14:e1:42:d4:bb:ea:98:24:11:
e4:70:f5:a8:bb:1c:e8:7a:3e:4d:29:28:ee:02:07:
4a:4e:74:4c:95:eb:b3:cd:82:65:68:a6:44:6a:f4:
75:4d:a4:58:a4:bb:c5:64:d6:17:4f:37:86:27:50:
7d:7b:b1:dd:75:d2:6d:b1:fb:e7:ea:48:ed:22:52:
09:e9:a9:73:bc:a6:6c:5d:3f:0a:6f:78:2b:cd:45:
03:d4:27:1b:2d:80:f3:78:81:cc:a2:13:04:54:b5:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:4F:FA:03:81:65:00:AC:6F:9E:BD:3A:36:88:21:48:15:70:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3d:d8:a9:44:41:92:af:a4:9f:4c:c1:91:db:68:dc:f2:e5:
a4:4d:0f:3b:26:86:24:d7:94:58:c3:16:79:1e:26:a3:3c:87:
1b:b5:1b:64:de:68:34:39:7d:c0:e4:60:8c:db:27:7e:48:c7:
f9:17:b5:65:1b:85:b0:71:f6:b1:92:fd:ac:27:10:85:42:ef:
3e:3d:ab:6e:e7:86:87:58:91:30:61:5c:c8:e0:26:27:ae:b3:
0e:ac:23:41:8c:23:fe:f4:aa:53:2c:0f:66:60:4d:fd:d0:50:
ca:b7:9c:a2:35:e7:9f:f4:9d:9b:03:f4:96:aa:32:0b:6f:ee:
d8:71:49:b9:ba:36:f5:33:18:93:9c:96:f1:38:0e:ed:5c:68:
67:d5:a7:2c:29:ee:72:80:33:00:3e:97:23:53:09:02:66:db:
b5:d5:ee:b3:4d:6c:3c:6e:1c:ce:e6:eb:46:eb:bc:b0:6a:b9:
2e:9a:20:35:8e:74:e3:e6:a4:0d:a2:93:a9:88:38:e2:c8:92:
b0:62:4a:ec:bb:24:ef:5d:7e:36:52:ff:49:f2:81:50:57:25:
66:14:9c:a0:27:2f:a2:11:42:f1:11:e7:a9:12:9f:53:d1:bd:
63:bf:36:1e:51:a5:fe:55:1e:86:fa:63:b2:11:1a:87:08:05:
92:56:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:20 2025 by rpki-client